This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File:                     unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier:          VAMNVAyKk1BhS/iB7tFUqTuBn8jTW04zH5PfqcyZpz4=
Subject key identifier:   0E:FA:FF:16:1C:C1:79:30:28:A6:89:1F:57:6B:A5:D6:1E:ED:AE:F4
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer:       /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial:       019B78CA8CC3EAFBC607D47296480CBB5095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number:          17A9
Signing time:             Thu 01 Jan 2026 09:01:38 +0000
Manifest this update:     Thu 01 Jan 2026 09:01:38 +0000
Manifest next update:     Fri 02 Jan 2026 09:01:38 +0000
Files and hashes:         1: 1-5QJBLxp5AmzSVUk8qikofQqav4.roa (hash: bXIAnhQl9MhR5WL6f2K74RtvR0mnQzIz2IKnZ9vIJ10=)
                          2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: XhL3ixOtr/UCEJ/2sOawsPhUdF4TCdhOj8TKgfWm4Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:ca:8c:c3:ea:fb:c6:07:d4:72:96:48:0c:bb:50:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
        Validity
            Not Before: Jan  1 09:01:38 2026 GMT
            Not After : Jan  2 09:01:38 2026 GMT
        Subject: CN=0efaff161cc1793028a6891f576ba5d61eedaef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:f0:aa:3f:3f:99:d2:fc:fe:3d:2c:dd:c8:
                    9b:17:c1:7a:e9:78:a9:b8:df:fb:e9:bb:0a:04:2a:
                    a9:fa:ed:d6:fe:f4:ab:2d:b4:1d:04:48:8b:f2:74:
                    a6:bc:23:0e:ef:09:2e:99:33:86:d6:58:f2:ab:64:
                    36:bb:e0:ce:75:b9:1d:db:a7:a4:17:a0:8d:e9:d9:
                    d1:11:d8:ea:8b:b8:f8:00:9d:eb:07:f7:bb:f7:39:
                    9b:a2:8a:f5:88:68:81:d9:a4:31:74:8f:f4:39:70:
                    43:e9:57:c9:b4:61:8f:3c:8f:be:c1:fb:5e:aa:c7:
                    e0:94:8d:0e:a0:b1:2f:3a:1e:fb:d4:ea:a5:7b:1e:
                    c0:8c:ea:26:89:69:c0:27:a4:30:24:e1:20:8e:2a:
                    ab:6d:b3:7d:e5:24:64:36:2f:55:df:d6:d8:31:88:
                    23:1f:92:9a:61:5b:39:f1:7c:8b:00:8c:2e:72:15:
                    d7:be:b0:6b:9d:4b:68:91:b6:cc:46:bb:0b:a3:3e:
                    93:08:00:0c:06:a6:97:79:99:b3:3b:45:81:e9:b8:
                    56:dd:e0:ab:d5:d8:88:d2:f4:a3:9f:8b:4d:33:d4:
                    c7:87:a6:58:a1:eb:61:03:36:ec:71:70:4f:f3:4f:
                    19:3e:24:d3:c3:38:a9:88:9a:b9:d8:bd:d8:0e:ad:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:FF:16:1C:C1:79:30:28:A6:89:1F:57:6B:A5:D6:1E:ED:AE:F4
            X509v3 Authority Key Identifier:
                keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:53:1e:b1:6a:4c:ec:84:6e:f3:67:91:d2:37:49:39:30:57:
         08:ac:b6:9a:db:8f:c9:92:45:b4:d6:65:40:72:10:e5:58:2f:
         a6:88:b4:11:db:20:40:f7:cc:a6:41:f8:68:81:5f:80:50:00:
         70:f8:7d:2a:c6:e8:da:6e:73:25:9c:dd:79:e7:ff:61:62:59:
         cb:cb:3c:85:57:e9:3e:9e:b9:0b:8e:ad:36:c6:bb:bd:23:0b:
         1e:65:bf:88:14:cd:15:19:f5:19:da:3b:06:77:33:b7:c4:4b:
         e3:4b:f3:0a:29:a4:77:ce:a4:ab:a8:b3:3e:a2:13:bc:da:f5:
         15:5a:83:1c:38:16:a3:9f:a0:85:cb:7f:12:8e:5b:83:da:71:
         5a:49:93:ea:0f:ba:2a:e0:68:9a:3d:74:2c:da:ae:5f:94:ce:
         a9:74:e6:56:fe:aa:86:55:0d:ee:29:ce:e9:51:d8:bd:78:d1:
         51:e0:dd:38:78:3d:a2:84:99:fa:62:58:a7:21:b7:c4:10:a7:
         0e:d9:cd:e8:8b:a5:ea:0b:47:9d:a0:c9:f1:65:12:80:f8:21:
         16:71:8e:68:cb:89:47:bf:32:7d:79:24:10:88:47:24:ca:e3:
         59:1b:f5:a4:ab:85:1a:7c:06:4b:c0:c9:58:05:bd:18:e8:40:
         24:ab:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 17:31:34 2026 by rpki-client